PlexTrac kayıtları
plextrac üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %72,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-307 Improper Restriction of Excessive Authentication Attempts2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-502 Deserialization of Untrusted Data2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-203 Observable Discrepancy1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2022-37144İstismar yok | The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts.plextrac · plextrac · CWE-307 | Yüksek8,8 | — | %0,9 | 7 Eyl 2022 |
35İzleyin | CVE-2024-11833İstismar yok | Arbitrary Directory Write via Runbooks Artifact Uploadplextrac · plextrac · CWE-22 | Yüksek8,9 | — | %0,5 | 13 Ara 2024 |
35İzleyin | CVE-2024-11834İstismar yok | Arbitrary File Write via PTRAC Importplextrac · plextrac · CWE-22 | Yüksek8,9 | — | %0,5 | 13 Ara 2024 |
34İzleyin | CVE-2024-12687İstismar yok | Insecure YAML Deserializationplextrac · plextrac · CWE-502 | Yüksek8,6 | — | %0,7 | 16 Ara 2024 |
34İzleyin | CVE-2024-11837İstismar yok | Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.Thisplextrac · plextrac · CWE-89 | Yüksek8,6 | — | %0,5 | 13 Ara 2024 |
34İzleyin | CVE-2024-11838İstismar yok | Local File Inclusionplextrac · plextrac · CWE-73 | Yüksek8,6 | — | %0,4 | 13 Ara 2024 |
34İzleyin | CVE-2024-11839İstismar yok | Insecure Deserialization via Runbooks Importsplextrac · plextrac · CWE-502 | Yüksek8,6 | — | %0,4 | 13 Ara 2024 |
34İzleyin | CVE-2024-11836İstismar yok | Server-side Request Forgeryplextrac · plextrac · CWE-918 | Yüksek8,6 | — | %0,3 | 13 Ara 2024 |
30İzleyin | CVE-2022-37145İstismar yok | The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTraplextrac · plextrac · CWE-307 | Yüksek7,5 | — | %1,0 | 7 Eyl 2022 |
28İzleyin | CVE-2024-11835İstismar yok | Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1.plextrac · plextrac · CWE-400 | Yüksek7,0 | — | %0,4 | 13 Ara 2024 |
21İzleyin | CVE-2022-37146İstismar yok | The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users coplextrac · plextrac · CWE-203 | Orta5,3 | — | %0,8 | 7 Eyl 2022 |
- CVE-2022-3714435İzleyin
The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts.
YüksekCVSS 8,8İstismar yokEPSS %1plextrac · plextrac7 Eyl 2022
- CVE-2024-1183335İzleyin
Arbitrary Directory Write via Runbooks Artifact Upload
YüksekCVSS 8,9İstismar yokEPSS %1plextrac · plextrac13 Ara 2024
- CVE-2024-1183435İzleyin
Arbitrary File Write via PTRAC Import
YüksekCVSS 8,9İstismar yokEPSS %1plextrac · plextrac13 Ara 2024
- CVE-2024-1268734İzleyin
Insecure YAML Deserialization
YüksekCVSS 8,6İstismar yokEPSS %1plextrac · plextrac16 Ara 2024
- CVE-2024-1183734İzleyin
Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This
YüksekCVSS 8,6İstismar yokEPSS %0plextrac · plextrac13 Ara 2024
- CVE-2024-1183834İzleyin
Local File Inclusion
YüksekCVSS 8,6İstismar yokEPSS %0plextrac · plextrac13 Ara 2024
- CVE-2024-1183934İzleyin
Insecure Deserialization via Runbooks Imports
YüksekCVSS 8,6İstismar yokEPSS %0plextrac · plextrac13 Ara 2024
- CVE-2024-1183634İzleyin
Server-side Request Forgery
YüksekCVSS 8,6İstismar yokEPSS %0plextrac · plextrac13 Ara 2024
- CVE-2022-3714530İzleyin
The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTra
YüksekCVSS 7,5İstismar yokEPSS %1plextrac · plextrac7 Eyl 2022
- CVE-2024-1183528İzleyin
Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
YüksekCVSS 7,0İstismar yokEPSS %0plextrac · plextrac13 Ara 2024
- CVE-2022-3714621İzleyin
The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users co
OrtaCVSS 5,3İstismar yokEPSS %1plextrac · plextrac7 Eyl 2022